Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
File:                     E9B-gFpSxTTMbTNFBXX_AjnoB84.mft (raw, json)
Hash identifier:          UAo1qmN6uCa/JFKMcn6DbA68f0UgVMm09Z/Z6lH/0uc=
Subject key identifier:   93:EC:A5:A2:B2:78:2B:D9:81:53:EF:B8:68:2E:1C:BB:A3:1C:D6:16
Authority key identifier: 13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE
Certificate issuer:       /CN=13d07e805a52c534cc6d33450575ff0239e807ce
Certificate serial:       01A0C77D2A85438DBDC099ECC64EB33481E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
Manifest number:          114F
Signing time:             Tue 22 Sep 2026 05:01:03 +0000
Manifest this update:     Tue 22 Sep 2026 05:01:03 +0000
Manifest next update:     Wed 23 Sep 2026 05:01:03 +0000
Files and hashes:         1: E9B-gFpSxTTMbTNFBXX_AjnoB84.crl (hash: XN67K5xC0kZ0P0EjHCyoDDt6YOoJ5FAoRWMagX+QbrU=)
                          2: m_4G_0Oxit4jN9Mi8en63Te59ko.roa (hash: NR2mOcFmt971BLwl94JPSXCXHeE7+txzuM2W8JbnNaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7d:2a:85:43:8d:bd:c0:99:ec:c6:4e:b3:34:81:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d07e805a52c534cc6d33450575ff0239e807ce
        Validity
            Not Before: Sep 22 05:01:03 2026 GMT
            Not After : Sep 23 05:01:03 2026 GMT
        Subject: CN=93eca5a2b2782bd98153efb8682e1cbba31cd616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:97:51:7b:48:fa:39:15:4c:65:64:2f:97:
                    9a:71:6a:6a:af:1d:e8:31:c0:9c:c7:5b:ba:c4:56:
                    72:ca:ee:bb:9b:f5:99:1b:9b:2c:cc:f0:ab:e2:0b:
                    58:3a:49:a1:ad:eb:16:4e:5d:2c:0f:c9:4b:72:3a:
                    82:24:15:29:1e:a9:0d:76:97:ed:f5:7a:d5:a0:2d:
                    77:8c:15:0d:0c:66:4b:f1:78:80:2f:72:18:dd:7f:
                    11:2b:19:56:03:b3:58:cd:89:86:95:39:57:d7:20:
                    b0:ce:a0:a6:70:67:8a:44:ad:97:01:92:89:37:22:
                    f2:74:99:0b:8b:6b:67:38:fe:d8:63:06:fb:e9:fd:
                    11:f2:a1:a4:2c:3c:68:cb:9b:b8:02:74:99:b6:bb:
                    8e:58:da:ce:e6:08:f6:03:33:de:51:0a:fc:43:05:
                    7e:db:9c:53:a1:d7:41:e7:4d:1a:86:6a:96:cb:af:
                    5a:96:db:c3:fc:cf:36:77:b2:33:bc:e4:e5:a9:64:
                    a2:08:3c:0b:7e:f9:75:27:ed:c6:6b:bf:d8:da:e7:
                    ed:c4:21:eb:c9:07:d1:7d:5d:3e:3f:43:9e:4f:c5:
                    a8:9c:41:2e:f9:69:5c:05:0c:9e:4c:09:2c:51:7d:
                    fa:96:3f:80:b8:9b:80:66:83:c6:0c:86:5a:1a:8b:
                    c5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EC:A5:A2:B2:78:2B:D9:81:53:EF:B8:68:2E:1C:BB:A3:1C:D6:16
            X509v3 Authority Key Identifier:
                keyid:13:D0:7E:80:5A:52:C5:34:CC:6D:33:45:05:75:FF:02:39:E8:07:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9B-gFpSxTTMbTNFBXX_AjnoB84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b745d8-abc6-477a-a459-ad7f9262a7c2/1/E9B-gFpSxTTMbTNFBXX_AjnoB84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2f:45:20:d2:07:07:06:b7:9c:cd:6d:8a:86:6b:38:0d:4a:
         88:d7:74:4e:22:e5:70:1b:d0:62:26:d7:65:e6:fb:5f:db:d6:
         36:b6:ee:8b:04:7f:6b:c1:bb:cc:bf:e8:78:a5:c3:66:d0:54:
         72:dd:71:7c:0d:88:1f:f7:59:c6:88:a7:c6:f6:91:75:29:f4:
         5a:f3:0d:2c:bc:47:0d:c9:ed:5f:25:34:51:ae:4c:70:bb:17:
         7f:e2:88:1b:74:d2:5e:f7:20:ea:8c:9e:12:5c:53:70:8c:f1:
         04:85:ed:93:2e:fa:88:a4:9a:5e:ea:53:fe:83:7c:5a:3f:2f:
         67:53:8d:90:35:3c:1a:6e:d9:74:a6:c2:b5:c0:17:c4:5a:f6:
         b9:f3:2c:a6:4b:4f:0d:2e:dd:ec:e0:a6:60:03:2c:40:dc:ef:
         9f:82:82:9c:36:76:93:98:c1:bb:37:fb:aa:30:96:d0:16:5d:
         da:35:25:1f:3a:f6:3a:83:1c:eb:c5:7c:a3:ed:2c:a2:28:92:
         4c:ec:5d:f3:0f:3f:84:6b:d9:ee:35:a4:7f:c5:80:72:f1:8c:
         e2:af:ad:1b:d6:b0:63:47:bc:54:a4:50:e2:5c:df:fb:1b:69:
         36:ed:63:b3:4b:44:23:29:c4:ea:d9:f0:dc:3e:0b:ab:4a:0b:
         3b:26:6d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:48:18 2026 by rpki-client